Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/LYDDQOnitFMTtAyGKwDs2TyB_cA.roa
File: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (raw, json)
Hash identifier: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=
Subject key identifier: 2D:80:C3:40:E9:E2:B4:53:13:B4:0C:86:2B:00:EC:D9:3C:81:FD:C0
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 01941FFAB4DFDF595CB6A63B3AEFEC50707B
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/LYDDQOnitFMTtAyGKwDs2TyB_cA.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42093
IP address blocks: 194.48.214.0/24 maxlen: 24
2001:67c:1724::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b4:df:df:59:5c:b6:a6:3b:3a:ef:ec:50:70:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d80c340e9e2b45313b40c862b00ecd93c81fdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:38:a4:8e:d7:c2:c7:03:fe:3c:27:4d:8f:
d7:7c:d0:ef:d2:dd:f5:d2:3b:90:64:5f:fe:ef:3b:
29:65:b9:ce:7d:ac:0d:cb:66:d5:bb:d4:57:0b:fe:
69:b2:9d:cb:fe:84:44:40:56:69:80:5f:c4:ef:ed:
93:66:c6:dd:c7:de:38:57:11:4e:99:63:de:c8:ad:
74:11:e6:4d:6e:c5:0a:0b:d1:a4:2e:67:cd:36:82:
15:6b:1d:88:30:3b:0b:d6:f5:bb:78:af:08:94:24:
5f:97:20:85:87:12:6f:5a:93:bf:e5:7a:3b:ad:d2:
5a:90:d9:cf:ff:9b:71:4a:9f:22:67:08:32:ae:65:
b2:ef:67:ca:d5:a6:d4:98:97:da:d1:3b:c6:60:46:
22:ba:31:d2:88:cc:0b:16:07:77:4f:10:44:1e:87:
6b:fd:98:a2:37:79:c4:1e:18:ec:9a:b1:6a:74:6a:
3b:78:23:1a:11:1c:49:42:4a:5d:43:dd:77:4c:31:
3c:8f:42:1a:f8:50:fb:dc:10:8c:e2:cb:ff:54:86:
1e:36:3a:c6:97:d1:a5:8c:60:da:ca:a7:90:10:f1:
00:a3:5b:76:91:77:54:34:a6:34:4e:12:dd:f5:ce:
45:fa:3c:06:03:97:5b:3b:45:95:73:1f:e8:4a:3a:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:C3:40:E9:E2:B4:53:13:B4:0C:86:2B:00:EC:D9:3C:81:FD:C0
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/LYDDQOnitFMTtAyGKwDs2TyB_cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.214.0/24
IPv6:
2001:67c:1724::/48
Signature Algorithm: sha256WithRSAEncryption
23:c6:06:06:35:ab:d4:81:66:e1:55:9b:45:44:09:01:36:2c:
d5:31:50:16:13:40:17:51:46:8e:a5:5e:5e:3c:b7:1f:7b:15:
eb:cf:29:1e:0a:06:5c:7a:b2:03:a8:aa:8a:fe:e7:58:3b:4c:
4a:ba:85:28:4c:6a:76:08:bd:7f:58:f1:bc:c7:cb:d2:59:fe:
75:0e:51:86:d1:25:8a:b3:89:8b:f3:5e:0c:48:34:20:5c:0a:
c8:72:b5:57:f9:de:3f:f5:85:ac:f6:d4:d3:aa:e7:e6:5f:05:
6b:d8:58:34:64:c5:f2:29:de:e7:a3:14:05:ba:19:fb:e0:50:
c4:6e:9f:b8:e6:24:65:ff:db:79:b1:ed:c3:c6:ec:12:0d:af:
78:c3:6d:15:62:9a:b0:3e:ee:35:18:67:11:9b:27:c1:8b:05:
90:81:23:80:e3:70:59:41:e1:c4:a2:b3:b4:e9:75:09:78:7e:
41:63:85:48:0a:4b:48:70:28:26:20:48:d9:13:f6:ee:8d:07:
0e:9d:74:60:24:9b:a6:51:33:24:eb:01:d8:da:6d:15:f8:1d:
e5:65:39:a8:c3:99:e6:f6:19:d1:6d:14:2d:55:de:79:2f:20:
7c:ed:38:4c:b5:aa:01:86:03:e8:b4:ec:29:dd:30:94:9c:02:
41:b8:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:19 2025 by rpki-client